Multi-factor Authentication, Powered by Duo

MFA is a security access management solution that verifies a user's identity at login with two or more verification factors. By providing a layer of protection to a user or company’s data, MFA helps to prevent malware, phishing, and ransomware attacks. MFA is important to help organizations guard against weak or compromised passwords. With the increase in cyber-attacks, more and more password lists are being exposed around the globe. This helps bad actors to more easily gain access to systems. MFA helps to prevent such attacks by requiring a secondary authentication beyond the point of Password Entry.

Lower Total Cost of Ownership Companies find Duo’s set-up, management and support costs often are much lower than other security solutions. Per-user licensing includes protection of unlimited applications and access through Duo’s single sign-on (SSO) with no hidden costs. Customers like Sentara Healthcare and Anchorage School District reduced operational costs and administrative time by 75% or more with Duo. It’s not uncommon for a company to roll out Duo to thousands of users and only have a handful of help desk tickets. Other support needs, such as password resets, also often decline after a Duo rollout.

Complex Environment Organizations that have a complex environment, such as a hybrid mix of cloud, on-premises and custom applications; multiple IdPs or VPNs; a geographically distributed workforce; and contractors and vendors; or those that have grown from mergers and acquisitions find that Duo is a great fit. We design security for the tough cases because rarely is a little security good enough. Our customers find access, productivity and security all improve immensely with Duo—a rare trifecta!

Integrates With Everything Being system agnostic means we can integrate with the broadest range of platforms and applications. Customers like that they aren’t forced to pick and choose which applications to secure based on their security vendor. Cloud applications, VPNs, CRMs, on-premises and custom applications can all be easily protected. We have many native integrations and are unique in our ability to protect RDP, Windows Offline and SSH logins.

Ease of Use and User Satisfaction Duo can protect even the most complex applications in a matter of minutes and admins find our portal easy to use. As one customer said, “every software vendor says they are easy, this is the first product that delivers.” Employees and admins love how flexible and easy Duo is to use. In fact, employees wearing Duo gear often get stopped around the world by strangers who tell them how much they love Duo! One of our employees was recognized by her Duo jacket and thanked in the wilds of Alaska

Device Trust Duo continuously inspects each device at every access attempt and can enforce hygiene requirements, such as requiring an up-to-date browser or operating system. It can identify which devices are managed by the company and which are not. Duo’s policy engine allows admins to create per-application access policies to control which types of devices can access sensitive applications and which cannot. Best of all, this can be done without deploying any agents on the endpoints.

Essential: This plan includes features like single sign-on, verified Duo push, trusted endpoints and passwordless authentication.

Advantage: The Duo Advantage plan includes all Essential features plus risk-based authentication, adaptive access policies, device health checks and complete device visibility.

Premier: This plan offers all Advantage features and inclusions such as complete device trust with endpoint protection check, a comprehensive package for zero-trust access and VPN-less remote access to private resources.

It’s clear that weaker MFA implementations are under attack as bad actors invest significant time, energy, and focus exploiting weak implementations with “ransomware-as-a-service” attack kits equipped with support contracts and fully staffed call centers. In addition to the security threat, this creates additional pain for enterprise customers as insurers increase premiums while reducing coverage. That’s why Duo is bringing protection previously available only in our most advanced edition to every Duo customer. All Duo paid edition customers can now block access from unknown devices and only allow trusted devices to gain access to resources. In other words, even if an attacker tried to use stolen credentials for access, their device (unknown to the system) should give them away. Over the last year, Duo has introduced 20+ security-oriented innovations such as passwordless, risk-based authentication, and improvements to single sign-on (SSO) — all of which are designed to directly combat these attacks and extend protection well beyond standard MFA implementations. We also recognize how important speed of response can be. That’s why Duo deploys in minutes to protect your client organizations.

Security is never quite a “one and done” proposition but Duo does its best to let you focus on the business outcomes you want. Duo focuses on security so you can focus on your business. They play their part by consistently protecting against breaches with a best-in-class access management suite that provides strong multi-layered defenses and innovative capabilities. That means you can be confident you’re letting legitimate users in — and keeping bad actors out.

1. Security Impact
   1. Can your solution protect against unauthorized access and provide visibility of users and devices in your environment?
   2. How effectively does the solution reduce the risk of a data breach?
   3. Can your solution provide access control for managed and unmanaged devices?
   4. Does your solution alert you to unusual or suspicious login activities?
2. Strategic Business Initiatives
   1. Is your solution compatible with other business initiatives such as enabling remote work or onboarding cloud applications?
   2. Does it fulfill compliance requirements?
3. Total Cost of Ownership
   1. Does your solution provide upfront value, or incur hidden costs to your organization?
   2. Can it work with modern and legacy systems?
   3. Can the solution help consolidate multiple siloed tools?
4. Time to Value
   1. How quickly can you get the solution up and running in your environment?
5. Required Resources
   1. What kind of resources are required to deploy and provision users?
   2. Is the solution architected to reduce ongoing administration tasks?